This document, annotated by N02ID - http://www.no2id.net , relates to the previously-leaked 'NIS Delivery Strategy - 
Aligning strategy and delivery 1 PowerPoint presentation. Although an undated printout, this document is therefore 
likely to reflect official thinking towards the end of 2007, possibly as late as the end of December 2007. References 
to "the Crosby report" (Sir James Crosby's report of the 'Public Private Forum on Identity', commissioned by Gordon 
Brown in late 2006) strongly imply that the earliest date this document could have been written would be the end of 
the summer of 2007, when a draft of the Crosby report was first circulated. 
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National Identity Scheme 
Options Analysis - Outcome 



The National Identity Scheme (NJS) will deliver a universal identity capability for all 
those who are legally entitled to live and work in the United Kingdom. The Identity and 
Passport Service (iPS) has reviewed options for implementation of the NIS, building on 
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the Strategic Action Plan published in December 2006, Senior officials from IPS, the 
Borders Agency, the Treasury, Cabinet Office and Office of Government Commerce 
have contributed to the options analysis. 



This note documents the outcome of the options analysis, which was supported by 
three workshops. The purpose of the three workshops was to agree the: 

1 Objectives of the National Identity Scheme: 



2. Scope of the solution and design principles to be applied; and, 

3. Delivery strategy for the Scheme. 

Next steps arising from these workshops are outlined at the end 



Objectives for the National Identity Scheme 

The objectives for the NIS are to protect the public and make life easier. Sub-objectives 
were prioritised into categories; Essential, Highly Desirable, Desirable to articulate their 
relative priority. All the sub -objectives are considered to be important and will be 
delivered Details of these objectives are given in Annex 1. 
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Delivery Options for the National Identity Scheme 

There are four potential pure' Scheme models These are; 



1, Citizenship (Borders) Model - f 7 want to know you have a RIGHT TO BE HERE" 
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The focus of the Scheme is on; borders, security and police; providing security as a 
public good. 

Secures the UK's borders - "counting them in and counting them out". 
Includes passport, BRP, nationalisation certificate. 
Designation of existing documents is the likely take-up driver. 
Benefit driven by higher integrity than existing passport. 



Real benefits are dependent on having capability to read passports and cards 



at borders. 

2. Trusted Relationships Model - "f want to know who YOU are" 
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The focus of the Scheme is on; access to public services; an enabler of service 
government", transformation. 

depend on ... ..... 

Scheme focused primarily on providing a range of public services across 

departments to meet the needs of individuals within specific target groups - 

typically those with multiple public sector needs, 
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Enrolment strategy and ensuing benefits are closely related to the 
characteristics of the target groups. 

Nature of the group(s) sefected drives the requirement for the infrastructure 
(especially face vs. fingerprints). 
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departments, and through simpler identity verification and remote 
authentication. 

• Supports and links with the transformational government agenda (data sharing, 
shared services, etc). 

4. Inclusion Model - "/ want to he ahie to prove who i AM" 

The focus of the Scheme is on; proving who I am quickly and easily; making life easier 
for people. 

• Dependent on provision of a compelling series of public and private sector 
services to target groups, enabling individuals to prove their identity "quickly, 

easily and safely" in the way proposed in the Crosby report . The preferred 
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target group is young people in the UK, and the intention would be to 
encourage take-up through development of specific services e.g. proof of age. 
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Real benefits are dependent on investment by the private sector in services to 
meet the needs of the target group. Crosby suggests that high levels of take-up 



among the target group would be required to trigger such investment. 



The models represent different stages in the Scheme, rather than being discrete 
options. 

* Most mature international schemes draw benefits from each of the Models - 
primarily because high take-up has been achieved. 
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Schemes that begin with public protection (eg Hong Kong) tend to be 
successful and add services later when high take up has been achieved. 

Schemes that start with services depend on early delivery of a fully functioning 
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benefits This can be difficult to achieve (eg Finland). 



The nature of the different models suggests some key design principles for roll out. 

» We need to set the tone for who carries the card and why, early on: international 
research suggests that first impressions have a prolonged impact. 



Citizenship (Borders) and Trusted Relationships models have benefits that are 
narrow in nature (tighter borders and safer interactions), but are easier to 
understand and market: you tend to carry the card in specific contexts, e.g. 
when you travel, at work, etc. 

Inclusion and Access models have benefits that are broader in nature (based on 
common usage of the card) r but are more difficult to understand and market: 
you carry the card because you need it every day. 
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up services across Government departments to drive benefits - suggesting you 
don't start here. 

Trusted Relationships and Inclusion can be focused on specific groups - 
suggesting that you couid start here: 

* Staning with students or other young people in first half 2009 seems to be the 
quickest option and aligns with HMT thinking on preferred target groups. But it 

remains an extremely high delivery risk . It also relies on creating voluntary 

demand with other public/private stakeholders, with the consequent risk of 
rejection 

* Starting with a trusted relationship' group will take longer and needs to be 
aligned with other priorities and other agencies. But the linkage of identity 
assurance and vetting/CRB etc provides a strong narrative and designation' 
can be used to enforce usage. 

We recommend an approach that targets a trusted relationship 1 group in the second 
half of 2009, alongside an initial group of youn g people from early 2010. Further 
development would be modular, initially focusing on increasing the reach of the trusted 
relationship' and inclusion 1 products, with the latter ideally having a very wide reach. 
Subsequent phases would involve increasing the leveJ of identity assurance in line with 
changing technology and threat levels, as higher levels of assurance become cost- 
effective and deliverable. Each phase wouid have to be manageable within a timeframe 
over which technology was reasonably predictable (under 5 years), 
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The first bullet point alone begs the question of how the costings will be structured, given that it is now implausible that 
passports are the justification. "We would incur 70% of the costs anyway for biometric passports," was always nonsense 
- derived, N02ID's analysis of statements suggests, while this was still a 10-year programme (2006-2016), from the 
observation that 70% of the population renews its passport in 10 years. But it is now patent nonsense. Passports are 
already ICAO compliant, if an "upgrade" is to be delayed till 2012, then expenses on registering people on new systems 
to bridge that gap are waste solely incurred in connection with the ID scheme. Will they still be hidden? If so, which 
department's budget will they actually come out of? 
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1. Enrolment 

* On the assumption that at some point in the future we will need to include 
fingerprints in the passport, we should eventually work towards a Scheme 
including a high proportion of fingerprint enrolment, driven by designation of the 
passport, once an affordabEe and convenient solution for enrolment has been 
developed. This is important as an ID card is to be used for travel in the EU. 

• Defined groups can be identified and targeted for enrolment. The level of integrity 
with which individuals are enrolled should be driven by the services that individuals 
will access. Individuals within these groups may enrol at a lower level of 
assurance, but then be asked to provide fingerprints later , if they need access to 
products or services that require a higher level of assurance. 
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We should leverage existing databases such as the DWP's Customer Information 
System to stimulate applications through marketing to target groups. For example, 
rising 16 year olds could be sent pre-populated forms for the Inclusion' card, 
based on existing cross-referenced databases, which would only need to be 
signed and returned. We also agreed to consider further the option of sending 
cards to selected individuals whose identity was already verified, requiring only an 
activation process 3 to complete formal enrolment. 

IPS will look at a broad range of options for the delivery of enrolment services to 
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customers These services will include, in the near term, the enrolment of 
failure" when fingerprints and photographs, but, in time, could include the delivery of the full 
of the scheme application and enrolment process (subject to standards mandated by IPS). IPS 
saying it can will take market provision of the service as the starting point, and seek to address 
identity. any market failures where possible, before committing to a long term solution. It is 
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envisaged that this may take time and that where early progress is required IPS 
may act more proactively to deliver a solution. 

Interviews for some groups will be necessary, but should only be used where 
required by risk assessment . Where interviews are required, they should be 
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carried out in as flexible a manner as possible to minimise customer inconvenience 
and reduce dependence on a fixed estate. It is likely that the number of interviews 
necessary would be well below the 10% level in the current business case. 
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• Universal compulsion should not be used unless absolutely necessary. It cannot 
be delivered quickly due to the need for inevitably controversial and time 
consuming primary legislation and would pose serious political, enforcement and 
resource challenges 

* Various forms of coercion, such as designation of the application process for 
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identity documents issued by UK Ministers (e.g. passports), are an option to 
stimulate applications in a manageable way. Designation should be considered as 
part of a managed rollout strategy, specifically in relation to UK documents. There 
are advantages to designation of documents associated with particular target 
groups e.g. young people who may be applying for their first Driving Licence. 
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product, ten fingerprints would also be enrolled. Enrolment of fingerprints on the 
Inclusion product would depend on the availability of an affordable and convenient 
(ideally market-based) enrolment solution This might be in late; phases, with the 
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The register for the Scheme (the National Identity Register) should be based on an 
existing Government technology asset, the Department of Work and Pensions' 
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Customer Information System (CIS). 
ID Cards 

* There will be an ID Card. The nature of the card issued should be proportionate to 



the services that the user wishes to access. People wishing to access services 
with a higher demand for integrity will be issued with a higher integrity card, and 
vice versa. 

• As the card is to be used for travel, it will not be issued to a lower standard than 
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that used for other travel documents (eg passport). The card will therefore include 
a photograph, signature and, from such time as we do so for passports, 
fingerprints. 



be 



unsure 
doing that a 
and 
" are still 
is a clear 
With the 
Clarity and 
's 

Plan". Or 
know what 
just don't 
it? ... 
thing 
rolling? 



Services 



The package of services offered is a critical component in encouraging take-up 
amongst the selected target groups. 

The NIS will become an identity "utility" to help deliver public services and will in 
time support the implementation of personalised services. 

The NIS will also support the delivery of identity services to the private sector. 
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* It is recognised that the market may be the most efficient mechanism to innovate in 
the development of services based on the NIR 

Next Steps 

The next steps fall into three categories; developing the tactical solution and business 
case for 2009, so that this work can begin; documenting the outcome agreed by this 
review as a Scheme Strategy; developing the medium term solution and business case 
in less detail. 
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1 . Further develop tactical solution (by end of January 2008) 

* Confirm target group(s) for 2009-201 1 (a trusted relationship group, followed by 
young people) - with Ministers and other key stakeholders 



• Confirm customer proposition and delivery approach for these target groups; 
application and enrolment; tokens; technical solution; secondary legislation, 
identity services 

• Develop business case and agree with HMT and others - detailed for 2009, quite 
detailed for 2010/2011 

2, Draft version 1 of Scheme Strategy (initial version by end of January 2008) 

• Summarise the outcome of the review (this document) 
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* Formally document and agree the Scheme Strategy (as per NIS Management 
Reference Guide), ensuring alignment with the Crosby report where this is 
appropriate 

* Confirm a high level approach for 2012 onwards, working with other departments, 
but with less detail required 

3. Develop medium term solution business case (Q1 2008) 

* Develop business case and agree with HMT and others - less detailed for 2012 
onwards 



This should be read in conjunction with the phases of the scheme, which are: 

2008 - Foreigners (Borders 1) [populist move] How many and who? N02ID has heard 
estimates as low as 10,000 in 2008. 

2009 - Trusted Relationships [populist move] Again how many and who? Unless they 
are just planning to issue a card warranting a CRB check or similar - which would be a 
significant dilution - how could this be done? A Big Bang (per sector) would be 
massively costly and difficult to do, if there's a full interview, dossier and fingerprints 
etc, but phasing-in is difficult to justify. 

This phase is most susceptible to actual resistence, whether by people standing on the 
N02ID Pledge - www.no2id.net/pledge/ - or just increasing the costs of providing 
services in those targeted sectors as people fed up with being pushed around move 
away from them. (Cf voluntary sector difficulties over CRB checks.) 

2010 - "inclusion" [coercion begins with the weak] Actually denial - 'assisting' young 
people when they "open their first bank account, take out a student loan, etc." It seems 
the IPS is proposing that you won't be able to get a job, except cash-paid labouring, or 
education beyond 16? 18? without an ID card. 

2012 - UK Citizens (Borders 2) [coercion continues with bait-and-switch, incidentally 
removing what we assume to be our universal human "right" to leave and re-enter our 
home country] "Broader take up should be driven through the designation of the 
passport when we scale up to large scale issuing of cards, ensuring allignment with 
other Schengen countries." Has IPS made a decision the Prime Minister should know 
about? 

It looks like Renew for Freedom - www.renewforfreedom.org - tactics may remain 
effective for some time yet. We started that expecting collection of passport data to 
change radically from late 2007 onwards. It didn't, and clearly it is now being put back 
further. So there are potentially five additional years for public resistance to build up 
against passports and denial of travel being used as a lever. 

r 

The question remains whether Abl interrogations for gap-year students will successfully 
subjugate or arouse that generation. 



Page 6 of 7 



Makes sense 
"papers pleas& 
Unless they an 
that the BIA currently 
detect forged 



cpnly in a 
!" Britain, 
suggesting 
cannot 
documents. 



Cf. "Know You 
Employers 
expertise in 
Unless they 
employment 
database, or 
"verification 
how would it 



Customer", 
no particular 

document^, 
to report all 
the central 
IPS for 
services", then 
help? 



have 
forged ( 
are 

t D 1 

pay 



>al 



Aren't these 
thing? "Money 
means sometjii 
to IPS than to 
it is not "org; 
The govern mejnt- 
view is rather 
by its ranking 
fraud against 
sector as mor& 
than prevention 
against individuals 
businesses, 
to ministerial 
ments about 
of the scheme 
help citizens s 
own identities 



Annex 1 - Objectives for the National Identity Scheme 
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Fundamental 



fm proving efficiency 
and effectiveness of 
border controls 

Improving efficiency 



Highly Desirable 



and effectiveness of in- 
country immigration 
controls 

Improving efficiency 
and effectiveness of 
compliance with illegal 
working regulations 
(know your employee) 



Reducing incidence of 



trie I 



serious organised 
crimes using false or 
multiple IDs by making 
it harder for criminals 
to obtain false IDs 

Reducing the risk of 
terrorist incidents 



On what evidence?! 



Improving efficiency 
and effectiveness of 
cross government data 
sharing; enabling 
delivery of 
personalised public 
services 

Improving efficiency 
and effectiveness of 
compliance with 
vetting and barring 
procedures in respect 
of children and 
vulnerable adults 

Improving detection 
and solution of crime 

Reducing abuse of age 
based access to 
products and services 

Reducing fraud against 



Desirable 



Improving vetting and 



barring more generally 
• Easing the processes 



public sector 
perpetrated by false 
identity 



for individuals and 
organisations requiring 
evidence of identity 
and notification of 
changes (fixing 
identity) 

Ensuring high UK 
international credibility 
in terms of identity 
assurance 

Increasing public 
reassurance in ID 
assurance 



Reducing fraud against 
private individuals and 
business enterprises 
perpetrated by false 
identity 

Improving efficiency 
and effectiveness of 
compliance with 
money laundering 
regulations (know your 
customer) 



What kind of "vetting 
and barring" is 
contemplated beyond 
the established sorts 
addressed under 
"highly desirable"? 



Isn't this circular? 
Requirements for 
notification and 
identification are 
generally imposed by 
government. "Making 
it easie r to do what 
we tell you," doesn't 
seem I ke a great 
selling point. 
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The police-state reasserts itself. 

All five 'fundamental' objectives, 4 of 5 'highly desirable' objectives, and 4 of 6 
'desirable' objectives are national and international policing and order issues. All but 
one - "Increasing public reassurance in ID assurance" - are gains for big government 
with little or no benefit to the citizen, though even that single exception is arguably a 
gain for government: such "reassurance" could only arise if people believe in the ID 
system itself. 



This implies that IPS 
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really mean it? 
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